Three different users will touch your security platform this week: a person clicking through the UI, a script running in CI, and an agent deciding what to query next during an investigation. Most products rush the API to build a pretty user interface and only think about programmatic access later,